Live › vulnerability › CVE-2026-90717
Go to dashboardDell PowerProtect Data Domain Management Center has an authentication bypass by spoofing in several release lines. A low-privileged remote attacker could exploit it to elevate privileges, and the flaw could affect the managed Data Domain systems too.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 09:32 UTC. All times on this page are UTC.
Teams running Dell PowerProtect Data Domain Management Center in the affected release lines, especially where low-privileged users or remote access to the management interface exist. Sites on versions outside the listed ranges, or without remote access to the appliance, are less exposed; the sources do not say more.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. This vulnerability could impact other managed Data Domain systems.
This page as .md · .json · in your agent: get_signal("CVE-2026-90717")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.